Google's AVDH Tool Identifies Over 100 Critical Vulnerabilities in Two Days

Google's Mandiant has revealed the effectiveness of its Agentic Vulnerability Discovery Harness (AVDH), which found over 100 critical vulnerabilities in just two days during an investigation of stolen corporate repositories. The AVDH tool, operational for ten months, utilizes AI agents to analyze vast amounts of source code, uncovering significant flaws at an unprecedented speed. In addition to the rapid discovery of vulnerabilities, AVDH has been instrumental in identifying critical issues in widely used web extensions and open-source projects, resulting in multiple CVEs, including CVE-2026-13242 and CVE-2026-55803, both published on July 10, 2026. This tool has proven essential for enhancing vulnerability detection processes and accelerating incident response efforts. The findings underscore the growing importance of AI in cybersecurity, particularly in the context of defending against adversarial AI misuse.

Key Points: • Mandiant's AVDH tool found over 100 critical vulnerabilities in two days. • The tool has been in use for ten months, scanning millions of lines of code. • CVE-2026-13242 and CVE-2026-55803 were published on July 10, 2026.